WMV file with characteristics of probable tampering


sraposo

New Member
Apr 26, 2017
6
0
#1
Sirs,

1- ASF format video file (wmv file) made by a 4-channel dash cam recorder. Unknown maker, model and settings
2- frame rate: 4 FPS. That´s what happens when video is played
3- nominal frame rate: 30FPS
4- from frame 0 till 87 and from 172 on, 2 cams are updated at each frame, alternatively to the other 2 cams
5- from frame 88 till 171, a pair of even-numbered/odd-numbered (e.g 88/89, 90/91,...) shows the same image, changing all four cam images at a time
6- frame 149 is missing
7- there´s a 16-second jump in time showed by timestamps on frames 171 and 172

The mission is check authenticity of this file.

The main fact that catch anyone´s attention is item 7, that strongly suggests a cut off, but that is allegedly due to a recording system failure, according the person who provided the video.

It´s quite curious what happens in itens 5 and 6

In a small degree, item 3 doesn´t seem to comply to the average frames per second that are seen during playing.
 

sraposo

New Member
Apr 26, 2017
6
0
#2
Complimentary info:

8- Field "Creation Time" in "File Properties Object": 2016-2-11 10:23:12.686 (five days after accident). This field, according Advanced Systems Format (ASF) Specification, Revision 01.20.03, edited by Microsoft Corporation (December 2004), "specifies the date and time of the initial creation of the file. The value is given as the number of 100-nanosecond intervals since January 1, 1601, according to Coordinated Universal Time (Greenwich Mean Time).(...)"

It´s quite curious what happens in itens 5, 6 and 8.
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu